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:r6823387:;.pn::;,;;!^-:; ::H=-;^^ ''^ ''M :-p-:=h!:'^ 



10/927803 



(cpunt$4 recprd$4 retriev$4 :saw$4) heariO ((URL HTTP Webpage.: 
resource hyperlink) adj (request))* 

((measur$4 monitor$4) nearS ((Access adj frequency) (request adj 
frequency) bandwidth connectivity)) and (attack$4 hecker 
unauthorized) and (authentication authorization account$4) 



((C|xiht$4 fec6rd$4 retrievM sav$4):near10 ((URjU HTjTP^^ -W:-^' 
W ebpageTiespurce hyperlink) adj (request))): and ;((measur$4 i i i i : ! : : ; 
rnqnitor$4) riearS ((Access: adj: freiquency) (request adj frequency) : : 
: bWidwid itfi connectivity)); and ; (attack$4: tieckier iunauthorized ); and j ; ; ; 
(kithendcatiort authorizati^^ 

((count$4 record$4) near3 ((URL HTTP Webpage resource 
hyperlink))) and ((measur$4 monitor$4) nearS ((Access adj 
frequency) (request adj frequency) bandwidth connectivity)) and 
(attack$4 hecker unauthorized) and (authentication authorization 
account$4) 



:((rrieasur$4:nionit6r$4): hearS ((Access e^ij frequency) (request adj 
frequency) bandwidth' connectivity)) and: {attack$4 jhecker::: 
: unauthorized) jahid (authentication jauthbrjzatjpn; ;accpunt$4 ) : ; : ; : ; 



(((measur$4 monitor$4) nearS ((Access adj frequency) (request adj 
frequency) bandwidth connectivity)) and (attack$4 hecker 
unauthorized) and (authentication authorization account$4)) and 
(((preventive defense) near3 (measure)) nearlO (heck$4 attack$5 
breakin$4)) and (denial nearS service) 



j (((rneasur$4; rhonitor$4 ) :near5 ; ((Access; adj f ri^uehcy) Knequest ;adj ; 
: frequency) bandwidtti jconnectiyity)) and: (attack$4 iheckerj j 
unauthorized) land (authentication :authbrization; :account$4))iand ; : ;i ; 
; (((preventive defense); near3 (rineasiire)); hearil 0 ;(heck$4; attack$5 ; ■ ; ; 
.breakiri$4)) . ; 

((measur$4 monitor$4) nearS ((Access adj frequency) (request adj 
frequency) bandwidth connectivity)) and (attack$4 hecker 
unauthorized) and (authentication authorization account$4 AAA) 



;^''64&4203^i>ri:i 
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(((measur$4 monitor$4) nearS ((Access adj frequency) (request adj 
frequency) bandwidth connectivity)) and (attack$4 hecker 
unauthorized) and (authentication authorization account$4 AAA)) 
and (denial nearS service) 



(((rrieasur$4' rh6hitor$4) nearS !((Access; adj frequency) (i^iiest adj : 
frequericy) bandwidth connecUvtty)) and; (attack$4 hecker::::;;::::^::^::?:: 
unauthorized) :afid (authenticatiOT iauthqrizatjpn* :acc6unt$4; AAA)) mi; 
;and!((shut$5) near!(accountTiac^^ 



(((measur$4 monitor$4) nearS ((Access adj frequency) (request adj 
frequency) bandwidth connectivity)) and (attack$4 hecker 
unauthorized) and (authentication authorization account$4 AAA)) 
and (shut$5 near (account access)) 



(shut$5;Cl6s$5:hdddown:dCT 



(shut$5 clos$5 holddown deny$5) adj (account access) 



: ((shut$5 cl6s$5 holddown^ dehy$5):adj: (accbuntjaccess)) arid: 
((measur$4:monitor$4) nearS ((Access adj frequency) (request adj : 
: f requericy) baridwidth^ ^connectivity)): and : (attack$4 ihecker ; : ; i i ; ; : i : ! i : ; : i ; ; 
; unauthorized) ;and (authentication iautfiorizatibn' ;£ccbunt$4; AAA); 

(shut$5 holddown) adj (account) 



; (holddown): acfj (acc<xint) : : 



(((measure monitor count) near2(access$4 frequency requests)) 
and (HTTP adj request)) and 709/223,233,234 ,235.ccls. 



i (((measure): adj i^[!S^^^py/J[}^^_\ jii??f;1 5; (HTTR adj j! 
'requ(est))i:inv :i; ":i;. ' ". ^ ' 'i''*!;;;" 



(((measure) nearlO (frequency nearS requests)) nearlS (HTTP adj 
request)) 



(measure) nearl 0: (HTTP adj request): : 



((shut$5 suspend) adj (account)) and (ISP) 
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USPAT; 
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DERWENT; 
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((shut$5 suspend) adj (account)) 



: ((shtit$5 doseidrop: suspend) -adj: (account)) ; \ 



(((shut$5 close drop suspend) adj (account))) and ((IS adj 
provider)(ISP)( Internet adj servcie adj provider)) 



: (authenticat$4 :autf}6rlz$5 accouht$5) and ((shut$5 cld^eidrop; ; 
suspend); aidj (account)j; 



((authenticat$4 authoriz$5 account$5) and ((shut$5 close drop 
suspend) adj (account))) and (HTTP) 



i(susperid^);near5(acc6unt) ■ 



( (suspend$4) near5(account)) and (authenticat$4 authoriz$5 
account$5) 



; ((; (suspend$4) :near5(account)); and; (authenticat$4 ;auth6riz$5 --^^l-- 
abcount$5)') -and (coUnt$4; record$4i retriev$4 jsyw$4 )i 0 ((URt ■ 
HTTP! yVebplsge Tesqii rice 

(( (suspend$4) near5(account)) and (authenticat$4 authoriz$5 
account$5)) and ((measur$4 monitor$4) nearS ((Access adj 
frequency) (request adj frequency) bandwidth connectivity)) and 
(attack$4 hecker unauthorized) and (authentication authorization 
account$4) 

((: (suspend$4)inear5(acc9unt))^ and! (auth6hti.cat$4 authorizSS; 
account$5)) arid '{attack$4 hecker unauthorized) 

( (suspend$4) near5(account)) and (exponent$4) 



: ((i (suspedd$4:) ;riear5(account)). and ; (authefiticat$4: authprizSS ; 
: account$5)) and {Period riear "1 0"; (exponeir»t$4)j: : : - - - = = ; = i ; ; - ; ;^ - 



( (suspend$4) near5(account)) nearlO Period nearlO exponent$4 



(suspen$6);riea!:10; Period inisailO; eo9orieht$4;; 
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2004/04/06 07:54; 



2004/04/06 07:54 

;20G4/64/06; 07:55 
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Pericxi nearlO exponent$4 



Period ; h©sr2; exp<)rierit$4 ; 



(Period near2 exponent$4) and (authentjcat$4 authoriz$5 
account$5) 



(Dos; DDos) same {(rne6©ur$4:m6hitor$4) hear^ 

frequency) (request adj frequency) bandwidth; connectivity)) and : : : : i 

(attack$4 ihecker; unauthorized) and: (authentication authorizationi : : i i : i 

account$4) 

(Dos DDos) same ((measur$4 monitor$4) nearS ((Access adj 
frequency) (request adj frequency) bandwidtii connectivity)) 

(Dos; pbos; <deniai: adj of; adj ;seryice) j; smie] ((m)^ur$4 ;monitor$4)i 
nearS ((Access ;adj : ifrequencyj: (r^uest^ aidj frequency) bandwidth : ; ; 
connectivity)) . =: 

(Dos (denial adj of adj service adj attack)) same ((measur$4 
monitor$4) nearS ((Access adj frequency) (request adj frequency) 
bandwidth connectivity)) 

(boS (deri[a| ;^;of ^s®!^!^® i^; i^^!^)) ^{"^^i^f^; ! ! ; i H ; 
nnionitor$4) nearS i((Apcess; frequency) (request adj frjequericyj 
bandwidth :Cp^ 

(denial adj of adj service adj attack) same ((measur$4 monitor$4) 
nearS ((Access adj frequency) (request adj frequency) bandwidth 
connectivity)) 

derilaji^iibf ;^;se^vtce 

(denial adj3 service adj attack) same ((measur$4 monitor$4) nearS 
((Access adj frequency) (request adj frequency) bandwidth 
connectivity)) 

(denial: ad]3 seryjce adj i aCtack): antd : ((rneasur$4: nripnilor$4) riearS : 
: ((Access adj ;freqLierK:y) i (req uest ; adj; frequency): bandwidtii 
connectivity)) V ;;';;•! 

"6701438".pn. 

denial. adj3 service adj attack 



(denial adj3 service adj attack) and ((updat$5 count$5) nearS 
(request$5 command$5)) 



(denial: adj3 service ;adj : attack); and ; (AAA) : i;; ; 

(denial adj3 service adj attack) and ((shut$5 c!os$5 holddown 
deny$5) adj (account access)) and ((measur$4 monitor$4) nearS 
((Access adj frequency) (request adj frequency) bandwidth 
connectivity)) and (attack$4 hecker unauthorized) and 
(authentication authorization account$4 AAA) 

(denial; adj3 seryiqe adj : attack); artd ; (attack$4: hecker unauthorizeid): : : 
^d : (autheriticatiph^ 

(denial adj3 service adj attack) same (attack$4 hecker 
unauthorized) same(authentication authorization account$4 AAA) 

wsiees^^pnJ ■ " ■ V- ' Y' 

•'6701438rpn. 

r6334i2i^,p^^: • ■ ' i - j . 

(count$4 record$4 reti'iev$4 sav$4) nearlO ((GET POST) adj 
(request)) 

(coUht$4 recoiTii4 retriev$i; s^M 

(request)) V j-; ■ * :]■•-:■ ::■ ' • ;!**:;:• *^^^::^-:=:==;!::!i:;:r::;:- 
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2005/06/2712:58 
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2004/12/21 17:02 
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(count$4 updat$5) nearlO (frequency) near4 (HTTP adj GET) and 
(HTTP adj POST) 



; (countM i updates): h^^^ 



(count$4 updat$5) near10{frequency) near4 ((GET) URL (POST)) 
nearlO (request$5 denriand$5) 



((denial :^3; service; SK^ 



SI 67 and (count$5 measur$5 calculat$5 comput$5) nearS (HTTP 
GET POST) nearS (frequency counts number) 



({denial ;adj3; service; adj attack) (DoS): (denjalrbfrservice)) 



SI 69 and (count$5 measur$5 calculat$5 comput$5) nearS (HTTP 
GET POST) near5 (frequency counts number) 



; ((denial ;adj3; service; adj; attack) (deniai-rof^efvice)) ; ; 



SI 71 and (count$5 measur$5 calculat$5 comput$5) nearS (HTTP 
GET POST) near5 (frequency counts number) 



SI 7:1 and ;(count$5 rneasur$5 calcujatSS :cornput$5):near5i (HTTP:: 
request) fiearS (frequOTcy counts number) ; 



'•6301618".pn. 
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((denial adj3 service adj attack) (DoS) (deniai-of-service)).ti. 



:120: 



59 



1 

21 
: 12 
242 
3 



6 

•;2; 
98 



((denisd adjSiseryiceiadj att^^ 



((denial adj3 service adj attack) (denial-of-service))and (709/223, 
233,234 ,235.ccls.) 



'•6189019'':pn.: 



"6751668".pn. 



30 

::12 

96 



"675166.8".pn: 
"633412r.pn. 

; ((denial ;adj3; service; £Mdj3 attack) ; DoS); same;(measur$4; rTi6nitor$4) ; 
near5 (Access request$5) near4 (frequency) ; v 

((denial adj3 service adj3 attack) DoS) and (measur$4 monitor$4) 
near5 (Access request$5) near4 (frequency) 

: ((denial near4 :attack)); and (nneasur$4 monitor$4) nearS^ (Access ■ ■■■■ 
request$5) near4 (frequency) 

((denial near4 attack)) 
(footeXand (09/394121) :: ; ; 
709/225,226,227.cc!s. and ((denial near4 attack)) 



(•^5371852" I "5473599" | ."5642515'' | "5892917" | "6078943' 
"6098122^1 "6341304" | "642505r | "6430619" |>6526448" 
; ^6529955'?; |; ^6662230'?). PNl; 



"709"/$,ccls, and ((denial near4 attack)) 
' get ; adj- post= yidj head; ;delete link ;neia'3^ unlink 
get same post same head same delete same link near3 unlink 

;n6751:668^;pn;;;;;; 



(User client subscriber) near4 (profile) same (DoS (denial near4 
service near4 attack)) 



US-PGPUB; 
USPAT; 
USOCR; 
EPO; JPO; 
DERWENT; 
IBM TDB 



US-PGPUB 
USPAT;; 
USOGR; 
EPftiiPO; 
DERWENT; 
IBMiPDBijii: 

US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 

iLiSrPGPUB; 
;USPAt; \\':: 
USOCR; : ■: 
EPO; JPO;: 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
USOCR; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

USPAT 



USPAT 
:USPAT 
USPAT 
USPAT' 
USPAT 

uspat; 

USPAT 



US-PGPUB; 
USPAT; 

USOCR::. 



USPAT 



USPAT 



USPAT 

:US4PGPUB; 
USPAT;;: .:; : 
EPO;.Jf?0;- 
DERWENT;^ 
IBM TDB.; : 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



OR 



OR 



OR 



OR: 



OR 



OR 



OR 
OR 
OR 
OR 
OR 
OR 
OR 
OR 



OR 
QR 
OR 
OR 



OR 



ON 



ON 



ON 



ON:..: 



ON 



ON 
ON 

PN 
ON 

on;: 
ON 
ON;; 
ON 

on" 



ON 
ON 
ON 
ON 



ON 



2005/11/04 06:49 



2004/12/22.09:10: 



2004/12/22 09:43 



2004/12/22 09:59 



2004/12/22 09:59 



2005/06/2714:00 
2005/06/2712:56 
2005/06/27:13:00 
2005/06/27 13:04 
2005/06/27:13:05 
2005/06/28 08:33 
2005/06/27:14:00 
2005/06/28 08:49 
:2(S) 5/06/28: 08!36 



2005/06/28 08:49 
:2005/i;i/01 16:08 
2005/11/01 16:08 
:20b5/11/6l 16:31 



2005/11/01 16:37 
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S19 
5 



LSI 9; 

lie:;:: 



S19 
7 



::S19 



S19 
9 



338 



209 



18 



(User client subscriber) near4 (profile) same (denial near4 service 
near4 attack) 



(TCP adj SYN adj Packet) 



:(pr0ftle):i:!:i::::;i::;::;:::;;:!:; 



"6260157" pn. 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



US-PGPUB, 
iUSPATjiii:; 
;EPG);:JP6i 
DERWENT; 
HBMITDB ; : 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



:US-PGPUB 

USPAT;. 

EPO;JPO; 

^DERWENT; 

jBM.TDB: 

USPAT 



OR 



OR 



OR 



or: 




ON 



on;; 



ON 



:ON 



ON 



2005/11/01 16:34 



;2005A11/0i;;i6;37; 



2005/11/01 16:45 



:2005/1.1/01:.16:46: 



2005/11/03 06:43 
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